lots of stuff

2026-08-16 14:48:04 +02:00
parent c63db540e8
commit 49fa352476
45 changed files with 32520 additions and 93 deletions
@@ -111,6 +111,13 @@
        interface_out: eth0
        route: true

+    - name: UFW - Allow podman to wireguard
+      community.general.ufw:
+        rule: allow
+        interface_in: podman+
+        interface_out: wg0
+        route: true
+
    - name: UFW - Allow node exporter scraping
      community.general.ufw:
        rule: allow
@@ -125,6 +132,31 @@
        proto: "tcp"
        to_port: 9882

+    - name: UFW - Allow blackbox exporter scraping
+      community.general.ufw:
+        rule: allow
+        interface_in: podman+
+        proto: "tcp"
+        to_port: 9115
+
+    - name: UFW - Allow loki push from ingress
+      community.general.ufw:
+        rule: allow
+        interface_in: wg0
+        proto: tcp
+        from_ip: "{{ wireguard_ingress_ip }}"
+        to_port: "3100"
+
+    - name: UFW - Allow loki push routing from ingress
+      community.general.ufw:
+        rule: allow
+        interface_in: wg0
+        interface_out: podman+
+        route: true
+        proto: tcp
+        from_ip: "{{ wireguard_ingress_ip }}"
+        to_port: "3100"
+
    - name: UFW - Enable and deny by default
      community.general.ufw:
        state: enabled